Custom Content Shortcode (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-03-20. Vendor: Unknown.

CVEs of Custom Content Shortcode

• CVE-2023-0340 - CVSS 8.8 (high), 2023-03-20: The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate one of its shortcode attribute, which could allow users with a contributor role…
• CVE-2023-0273 - CVSS 5.4 (medium), 2023-03-20: The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a…
• CVE-2021-24825 - CVSS 4.3 (medium), 2022-03-07: The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ (v < 4.0.1)…
• CVE-2021-24824 - CVSS 4.3 (medium), 2022-03-07: The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor,…
• CVE-2021-24826 - CVSS 5.4 (medium), 2022-03-07: The Custom Content Shortcode WordPress plugin before 4.0.2 does not escape custom fields before outputting them, which could allow Contributor+ (v < 4.0.1) or…